PERSONAL DATA PROCESSING POLICY

Last updated: January 06, 2026

1. General Provisions

1.1. This Personal Data Processing Policy (hereinafter - "Policy") defines the procedure for processing and protecting personal data of users of:

The Website and Application are collectively referred to as the "Service".

1.2. The personal data controller is an individual (hereinafter - "Operator"):

1.3. Use of the Service constitutes your unconditional consent to this Policy and the terms of personal data processing. If you disagree with the terms of the Policy, you must stop using the Service.

1.4. This Policy has been developed in accordance with:

2. Basic Definitions

2.1. Personal data - any information relating to a directly or indirectly identified or identifiable natural person.

2.2. Processing of personal data - any action or set of actions performed with personal data, including collection, recording, systematization, accumulation, storage, clarification, use, transfer, anonymization, blocking, deletion, destruction.

2.3. Operator - a person who independently or jointly with other persons organizes and/or carries out the processing of personal data.

2.4. User - a natural person using the Service.

3. What Personal Data We Collect

3.1. When Using the Website

Registration is not required to view content on the Website. When authorizing via Google OAuth 2.0 to add or edit content, we receive:

3.2. When Using the Application

Registration is not required to view content in the Application. When voluntarily authorizing to synchronize data between devices, we receive:

When authorizing via Firebase Authentication (email/password):

When authorizing via Google Sign-In:

3.3. Synchronized Data

When authorizing in the Application or on the Website, the following are automatically synchronized:

3.4. Technical Data and Analytics

Firebase Analytics collects (optional, requires your consent):

You can decline Firebase Analytics when first launching the Application or at any time in settings (Settings → Information).

Firebase Crashlytics collects (enabled by default, can be disabled):

Firebase Crashlytics helps us identify and fix errors to ensure stable operation of the Application. You can disable crash report submission in the Application settings (Settings → System → Send crash reports).

The Website web server automatically collects:

3.5. Data for Personalized Advertising

Advertisements may be displayed when using the Application. To show personalized advertising, we use:

You can:

4. Purposes of Personal Data Processing

We process your personal data for the following purposes:

4.1. Providing Access to Service Features

4.2. Improving Service Quality

4.3. Communication with Users

4.4. Compliance with Legislation

5. Legal Bases for Processing Personal Data

Personal data processing is carried out on the following legal bases (in accordance with Article 6 GDPR):

5.1. Consent of the Data Subject (Art. 6(1)(a) GDPR)

5.2. Performance of a Contract (Art. 6(1)(b) GDPR)

5.3. Legitimate Interests of the Operator (Art. 6(1)(f) GDPR)

You have the right to object to processing based on legitimate interests and can disable Firebase Crashlytics in the Application settings.

6. Methods of Processing and Storing Personal Data

6.1. Collection of Personal Data

6.2. Storage of Personal Data

6.3. Security Measures

We apply the following measures to protect your data:

6.4. Retention Periods

7. Transfer of Personal Data to Third Parties

We transfer your personal data to the following categories of recipients:

7.1. Google LLC / Google Ireland Limited

Data is transferred to Google when using:

Google processes data in accordance with their Privacy Policy.

Data transfer outside the EU: Google complies with EU Standard Contractual Clauses for data transfer to third countries.

7.2. Website Hosting Provider

To host the Website, hosting provider services are used, which may have access to technical data (IP addresses, server logs).

7.3. Advertising Networks and Mediation Platforms

The Application uses the following advertising networks and platforms to display advertisements:

7.4. Data Transfer as Required by Law

We may disclose personal data if required:

Important: We do not sell or transfer your personal data to third parties for commercial purposes.

8. Cookies and Similar Technologies

8.1. What are Cookies

Cookies are small text files that are saved on your device when you visit the Website.

8.2. What Cookies We Use

On the Website:

In the Application:

8.3. Cookie Management

You can:

9. Your Rights (GDPR)

In accordance with GDPR, you have the following rights regarding your personal data:

9.1. Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation of whether your personal data is being processed, and if so, to obtain access to that data.

9.2. Right to Rectification (Art. 16 GDPR)

You have the right to request rectification of inaccurate personal data.

9.3. Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR)

You have the right to request deletion of your personal data.

How to delete your account:

  1. In the Application: open Settings -> Synchronization -> Account and tap the "Delete Account" button
  2. On the Website: go to Profile -> Edit and click "Delete Account"
  3. By email: send a request to guitarsongs.club@gmail.com

When deleting your account, the following will be deleted:

Important: Songs that you added through the Website will NOT be deleted and will remain available to other users, as they are part of the Service's publicly available database. If you want to delete specific songs, do so through the website yourself or contact us before deleting your account.

9.4. Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request restriction of processing of your personal data in certain cases.

9.5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used machine-readable format and transfer it to another operator.

How to request data: send a request to guitarsongs.club@gmail.com. We will provide your data in JSON format within 30 days.

9.6. Right to Object (Art. 21 GDPR)

You have the right to object to the processing of your personal data based on the legitimate interests of the operator.

How to disable Firebase Crashlytics:

  1. Open the Application
  2. Go to Settings → System
  3. Disable the "Send crash reports" toggle

After disabling, Firebase Crashlytics will stop collecting crash data on your device.

9.7. Right to Withdraw Consent (Art. 7(3) GDPR)

You have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

How to withdraw consent:

9.8. Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates GDPR.

Competent supervisory authority (Germany):
Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Graurheindorfer Str. 153
53117 Bonn
Phone: +49 (0)228-997799-0
Email: poststelle@bfdi.bund.de
Website: www.bfdi.bund.de

9.9. Exercising Your Rights

To exercise any of the specified rights, contact us:

We will respond to your request within 30 days of receipt. In complex cases, the period may be extended to 60 days with notification of the reasons for the delay.

10. Personal Data of Minors

10.1. The Service is not intended for persons under 16 years of age.

10.2. We do not knowingly collect personal data from persons under 16 years of age. If we become aware that we have collected personal data from a minor without parental consent, we will take steps to delete such data.

10.3. If you are a parent or guardian and have learned that your child has provided us with personal data, please contact us at guitarsongs.club@gmail.com.

11. Automated Decision-Making and Profiling

11.1. We do not use automated decision-making that may have legal consequences for you or significantly affect you.

11.2. Firebase Analytics may use automated analysis to create aggregated statistics, but this does not result in decisions affecting you personally.

11.3. Advertising personalization is performed automatically based on your Advertising ID, but you can opt out of this at any time.

12. Changes to the Privacy Policy

12.1. We reserve the right to change this Policy at any time.

12.2. We will notify you of significant changes by one of the following methods:

12.3. Continued use of the Service after the changes take effect constitutes your consent to the updated Policy.

12.4. The date of the last update is indicated at the beginning of the document.

13. Contact Information

13.1. For all questions related to the processing of personal data and this Policy, you can contact us:

Email: guitarsongs.club@gmail.com

13.2. We undertake to respond to your requests within 30 days of receipt.

14. Final Provisions

14.1. This Policy is an integral part of the User Agreement.

14.2. In case of contradictions between this Policy and other documents, this Policy takes precedence in matters relating to personal data processing.

14.3. If any provision of this Policy is found to be invalid, the remaining provisions remain in force.

By using our Service, you confirm that you have read, understood, and agree to the terms of this Personal Data Processing Policy.